Behavioral task
behavioral1
Sample
b802a9b934d9425f706d37a3e33b99a324554642828bbb04cc0ffeb28533bbcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b802a9b934d9425f706d37a3e33b99a324554642828bbb04cc0ffeb28533bbcb.exe
Resource
win10v2004-20220901-en
General
-
Target
b802a9b934d9425f706d37a3e33b99a324554642828bbb04cc0ffeb28533bbcb
-
Size
153KB
-
MD5
0add789745ad5ef679bf36f6c310b70b
-
SHA1
24c42fcc547d8de1551f18976953a77596a4c312
-
SHA256
b802a9b934d9425f706d37a3e33b99a324554642828bbb04cc0ffeb28533bbcb
-
SHA512
e53cc3e145f69f453aae0508a1edad43cfe97900857e28f6fcde2d8d60bf6446ef15554db4b1dbd9e3496f46bdd96e6ec7bf632cbf2c792bfdee115d996bda44
-
SSDEEP
1536:NEhA2v/JGUBVr4pa/PRENwP96vw65aRRmN8qYIIM94uRaF7rO0/86x4:NCrv/JGuV0pSENso5yQSqwM9RcB/bx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b802a9b934d9425f706d37a3e33b99a324554642828bbb04cc0ffeb28533bbcb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE